This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/3230302e33332e38352e302f32342d3234203d3e20323633383331.roa
File: 3230302e33332e38352e302f32342d3234203d3e20323633383331.roa (raw, json)
Hash identifier: 0s1vFdpdKQnE/XmfCgKxF8YD+PzWLpcBKIDDIqK+/yI=
Subject key identifier: 7A:9C:08:27:D3:EF:B9:F0:56:04:2D:D4:B8:9C:00:E6:FB:6E:CD:E5
Certificate issuer: /CN=DF440E65C2E63992C250A9905BFC8D428DB61F12
Certificate serial: 36742684478D71C1D4B6F6334EC0DB898330B3F9
Authority key identifier: DF:44:0E:65:C2:E6:39:92:C2:50:A9:90:5B:FC:8D:42:8D:B6:1F:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/3230302e33332e38352e302f32342d3234203d3e20323633383331.roa
Signing time: Tue 06 Jan 2026 19:01:44 +0000
ROA not before: Tue 06 Jan 2026 18:56:44 +0000
ROA not after: Tue 05 Jan 2027 19:01:44 +0000
asID: 263831
IP address blocks: 200.33.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.crl
rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:74:26:84:47:8d:71:c1:d4:b6:f6:33:4e:c0:db:89:83:30:b3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF440E65C2E63992C250A9905BFC8D428DB61F12
Validity
Not Before: Jan 6 18:56:44 2026 GMT
Not After : Jan 5 19:01:44 2027 GMT
Subject: CN=7A9C0827D3EFB9F056042DD4B89C00E6FB6ECDE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:c4:13:6e:a9:f0:14:10:de:17:b6:20:4b:
8e:46:50:71:e9:2e:79:16:ac:64:8f:17:25:39:a8:
b9:9e:49:dd:6b:24:60:ab:37:64:07:f8:4f:2d:92:
d6:3d:30:fa:15:4f:40:eb:5f:cf:3d:1a:4e:ae:11:
77:79:0b:bb:57:22:48:5c:d5:2d:b3:d8:a8:f1:4e:
b0:72:43:e1:52:7c:7c:54:9e:aa:63:6e:ba:b1:5d:
47:78:17:5b:7d:52:79:26:67:08:2e:f9:e1:88:3b:
c8:3a:ea:12:30:c4:11:a6:47:47:f1:9b:64:29:85:
24:e3:a0:1a:f9:fa:04:3e:73:90:19:52:8d:d3:a4:
0b:9f:08:cf:d1:c5:04:f5:03:ef:27:33:69:a2:a3:
d3:e6:8c:f7:9f:2d:36:f0:30:21:87:a0:87:be:62:
15:f1:5b:7b:79:3e:33:bd:be:ee:75:e3:b1:2a:a2:
60:22:7a:a6:69:a6:61:0a:b6:44:2c:68:a1:b1:e4:
da:2c:e0:e3:58:26:07:48:86:bb:73:4e:56:dd:3e:
2c:60:d1:a9:4c:9f:16:60:49:ca:7c:16:83:95:0e:
36:58:38:20:96:f7:fc:29:cc:02:8f:dd:99:59:3f:
ae:f5:05:c6:49:26:0b:93:45:c9:8a:c4:67:a1:75:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9C:08:27:D3:EF:B9:F0:56:04:2D:D4:B8:9C:00:E6:FB:6E:CD:E5
X509v3 Authority Key Identifier:
keyid:DF:44:0E:65:C2:E6:39:92:C2:50:A9:90:5B:FC:8D:42:8D:B6:1F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF440E65C2E63992C250A9905BFC8D428DB61F12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48E82F7BA0FA591BEC7E035CFFD87245849693F2365E52ECBE46752996637A3E/0/3230302e33332e38352e302f32342d3234203d3e20323633383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.85.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7d:ea:77:9e:e2:c8:75:5d:0f:d3:d6:25:f8:2c:a5:6d:ff:
63:ce:ad:09:a5:b6:83:68:d1:8d:83:a2:62:70:29:c1:46:be:
bb:ff:73:af:55:1a:f2:5c:be:1f:87:40:a9:e1:ed:68:59:24:
b1:5f:c2:7e:ae:ab:c7:9d:ba:b0:ae:81:36:68:f0:d9:0d:ba:
9a:98:a7:9a:df:76:02:f0:92:6b:69:20:07:a3:21:62:4f:4f:
56:62:c4:31:95:5d:c6:a3:6c:75:19:f6:f5:c9:05:72:38:26:
28:34:46:bd:36:68:cd:1e:87:54:42:63:d8:5e:4c:6a:82:42:
be:30:e1:8f:1c:b2:a6:7e:b0:99:ae:26:42:0d:f0:eb:16:81:
33:f9:d6:bf:30:9a:b2:47:ec:54:f3:ce:fb:81:12:aa:30:83:
d7:87:4f:7f:72:58:e6:a2:d0:68:7a:c8:b4:2a:62:b2:e7:04:
2f:c1:34:e3:c9:fe:eb:a2:47:be:a3:95:cf:6e:d3:4b:83:1c:
12:3a:9b:62:df:fb:e3:68:c8:67:f5:b5:cf:5c:a0:8b:30:4e:
d3:6c:b3:f9:b1:7d:90:a5:5c:ed:9d:6b:cc:ee:0a:a2:6c:53:
8d:be:51:1e:c2:f6:e6:0a:e0:1f:e4:d6:84:3d:af:0d:2a:83:
c9:d4:2e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:38 2026 by rpki-client